Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
File: qQcj6hJVTVL0ZzoaSHifPQWniaA.mft (raw, json)
Hash identifier: Cq05l2vU7hl9iVmagSPcfTYTyfm8DkpdFNp4mEjEk00=
Subject key identifier: 85:A4:A3:1F:EA:4A:DF:EF:A5:52:FA:2D:0B:15:A9:BA:51:5D:EE:3A
Authority key identifier: A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0
Certificate issuer: /CN=a90723ea12554d52f4673a1a48789f3d05a789a0
Certificate serial: 019D3940D46B2479C375D9744AC41034EC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
Manifest number: 1520
Signing time: Sun 29 Mar 2026 11:00:43 +0000
Manifest this update: Sun 29 Mar 2026 11:00:43 +0000
Manifest next update: Mon 30 Mar 2026 11:00:43 +0000
Files and hashes: 1: qQcj6hJVTVL0ZzoaSHifPQWniaA.crl (hash: jEx6/KJn2mouYth3wLdvssKoXd6szKh/E46LGn7t4NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d4:6b:24:79:c3:75:d9:74:4a:c4:10:34:ec:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90723ea12554d52f4673a1a48789f3d05a789a0
Validity
Not Before: Mar 29 11:00:43 2026 GMT
Not After : Mar 30 11:00:43 2026 GMT
Subject: CN=85a4a31fea4adfefa552fa2d0b15a9ba515dee3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:34:31:36:f5:1b:59:91:1e:1a:f0:05:db:87:
2e:14:0f:d4:41:31:59:76:cd:b4:cc:6c:31:5e:f2:
1b:ab:a9:b2:2e:84:d0:18:a6:5b:af:d1:52:fc:5d:
f4:1b:ab:0e:85:cb:80:7a:ff:0b:32:e4:e4:57:c9:
5b:67:83:e8:d1:5e:11:5a:40:16:cb:a2:80:87:49:
3e:bc:8d:db:3e:51:a3:2a:fe:bd:7a:ff:3a:8e:c4:
b1:f5:72:6a:8a:4d:93:ec:5c:63:b2:48:70:77:da:
08:35:fb:cc:d4:e8:7d:11:68:02:c6:cb:36:20:d6:
cf:10:71:2e:37:28:c0:ca:3e:8b:37:a6:cb:50:a4:
02:5b:05:9f:45:cf:eb:74:4b:e3:17:72:cb:ea:11:
94:14:01:61:21:da:0c:73:2d:cf:33:90:14:bb:44:
8c:b5:36:91:e5:71:d1:03:ad:41:43:2e:ea:c8:14:
c4:ea:b2:8b:1a:72:24:30:ee:b7:96:38:6c:62:b0:
84:7a:60:75:60:dd:54:95:13:24:65:73:11:4d:17:
0c:8c:a4:c6:ca:91:a0:f1:2d:78:0d:2b:05:24:64:
a4:53:a8:e4:19:45:6b:1f:45:f0:3d:53:1c:f3:68:
92:a5:02:70:7d:56:a6:33:8a:62:c6:74:e6:36:bd:
50:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A4:A3:1F:EA:4A:DF:EF:A5:52:FA:2D:0B:15:A9:BA:51:5D:EE:3A
X509v3 Authority Key Identifier:
keyid:A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7d:58:19:9d:cc:14:ce:c3:46:58:13:91:2a:98:10:16:86:
11:fa:c5:17:43:82:0a:0e:1f:3a:3d:9e:52:c6:c2:39:50:62:
9b:7d:33:41:37:84:cc:12:43:b7:cd:a5:34:95:b7:4d:44:56:
bc:66:e8:92:3f:30:0b:f4:1b:a2:42:13:47:d6:06:2c:57:d6:
7e:56:0d:0e:7d:eb:73:a4:31:ba:f4:6f:ac:4a:7b:fb:38:d1:
e5:84:26:db:f9:46:a9:e2:df:48:6b:bf:00:72:8a:23:3e:50:
b2:bf:44:ac:47:7b:05:4b:90:79:54:9e:95:2a:46:81:d3:13:
b9:24:0f:90:c9:c7:10:dc:82:34:a2:84:7a:5f:65:2b:b1:26:
a0:60:5c:28:7f:30:82:1f:ad:fa:52:8c:1f:aa:dc:8c:ab:92:
ce:8f:08:16:e5:7c:20:26:5b:fa:5e:c5:e2:54:82:1a:26:49:
7f:33:c6:ba:b7:f0:2f:6b:7f:f9:62:0e:23:fa:a3:7b:4d:6b:
b2:d3:92:de:02:3e:5d:ba:3e:b5:57:cb:8c:78:56:d2:a2:a6:
8f:a4:ff:30:df:7b:30:0d:c0:06:50:16:b3:53:74:75:8e:0b:
ad:fc:ff:a4:2b:99:06:66:1c:e4:10:7b:3d:a8:c3:09:59:21:
32:42:60:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:51 2026 by rpki-client